DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
1c0fe2059e3ce2cde2567bf65c274676_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
1c0fe2059e3ce2cde2567bf65c274676_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
1c0fe2059e3ce2cde2567bf65c274676_JaffaCakes118
Size
80KB
MD5
1c0fe2059e3ce2cde2567bf65c274676
SHA1
9591aeb43e14b2c92abcc3eb77e335c7f571c2d5
SHA256
60d8230a89ed76739f2207907dd24c2c791f23850c4383d0596fdccef1f5cf9d
SHA512
fe393f3c6e66023cd288817c3d33680476c70a53565eb58e7091eaed99ecbfd060b4accd4b03e7738249b9be2919ecd508dc79760d500462c463949ee35d6d4f
SSDEEP
1536:RX/bU4+qODdrfk+vtGO80UqNqGRPF0h8k79Pl5E0HW6Eks04c3qWMT:lQZ7xfbvcFqNHRPFidkE4c32
Checks for missing Authenticode signature.
resource |
---|
1c0fe2059e3ce2cde2567bf65c274676_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE